3 matches found
CVE-2024-2888
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor allows Stored XSS.This issue affects Post and Page Builder by BoldGrid – Visual Drag and Drop Editor: from n/a through 1.26....
6.5CVSS8.6AI score0.00336EPSS
SaveExploits0References1
EUVD-2024-44031
Malicious code in bioql PyPI...
6.4CVSS6.5AI score0.00263EPSS
SaveExploits0References3
CVE-2024-6848
The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 1.26.6 due to insufficient input sanitization and output escaping affecting the boldgridcanvasimage AJAX...
6.4CVSS5.8AI score0.00462EPSS
SaveExploits1References1
20